Barbara Pooley, Hull
Toby had the shop announce each purchase using the buyer's real name. It then told everyone all day that Barbara Pooley of Hull bought a toilet brush.
The mistake
The shop's 'recent purchase' pop-up pulls the buyer's real name and town straight from the order record and displays it to every visitor, with no anonymization, sampling, or opt-out. It always renders the single most recent order rather than rotating through a queue or falling back to a generic message, so on a slow day when only one sale comes through, that same customer's name and item stay plastered on screen for every subsequent page view until another order finally arrives.
- ecommerce
- customer-data
- privacy
- frontend
- release